Privacy Policy

Identity of the data controller

Data controller: Hempuff Trading BCN SL
NIF: B21771332
Registry: Commercial Registry of Barcelona, volume 100048798911, folio 0, sheet B-633771, entry 1
Address: Rambla Badal 38, 4º 1ª, escalera A, 08014 Barcelona, Spain
Email: info@hempuff.store
Website: https://hempuff.store

Principles applied to data processing

The owner applies the principles established by the General Data Protection Regulation (GDPR):

Lawfulness, fairness and transparency.
Data minimisation: only the strictly necessary data is requested.
Storage limitation.
Integrity and confidentiality.

Collection of personal data

Browsing the website does not require you to provide any personal data. Personal data is provided when purchasing a product or contracting a service, and when signing up through the subscription forms managed with MailChimp.

User rights

The owner informs you that you have the following rights regarding your personal data:

Right of access to the stored data.
Right to rectification or erasure.
Right to restriction of its processing.
Right to object to the processing.

Given the characteristics of the processing, the right to data portability does not apply. To exercise your rights you may contact info@hempuff.store, attaching a copy of your national ID.

Purpose of the processing

Contracting forms

Name, surname, identity document, email, postal address, telephone and payment data are collected for the purpose of managing the commercial relationship, shipments, invoicing and collection of payment.

Subscription forms

Name, surname, email, telephone and website are collected to manage the subscription lists and to send newsletters and promotions. This data is located on Mailchimp's servers (USA).

Other purposes

Compliance with the applicable legal conditions.
Improvement of the services offered.
Analysis of browsing through cookies.
Management of social networks (Facebook, Twitter, LinkedIn, YouTube, Instagram).

Security of personal data

The owner takes all reasonable precautions and follows industry best practices to prevent the loss, misuse or unauthorised access to the data. The data will not be disclosed to third parties except by legal obligation or when necessary for the contractual relationship, with your express consent.

Legal basis for the processing

The consent of the data subject.
The performance of a contract or the application of pre-contractual measures.
Compliance with legal obligations.

Categories of personal data

Only identifying data is processed. No specially protected categories of data are processed.

Data retention

The personal data provided to the owner will be kept until you request its erasure.

Recipients of personal data

Mailchimp — The Rocket Science Group LLC (USA), email marketing services.
Google Analytics — web analytics service provided by Google, Inc. (Mountain View, California), which uses cookies to analyse the use of the site.

Web browsing

While browsing the website, non-identifying data may be collected, such as the IP address, geolocation, usage logs and browsing habits. The site uses Google Analytics to obtain statistical and trend data.

Accuracy and truthfulness of the data

The user guarantees that the data provided is correct, complete, accurate and current, being solely responsible for its truthfulness.

Acceptance and consent

As a user of the website, you declare that you have been informed of the conditions regarding the protection of personal data and give your consent for its processing by the owner in the manner and for the purposes indicated.

Changes to the privacy policy

The owner reserves the right to modify this Privacy Policy in order to adapt it to legislative or jurisprudential developments.